Scheduled scans

Use the Configuration } Scheduled Scans sub-node to configure scans which are to be automatically executed periodically or on a specific day/time. This allows you to automatically execute particular scans at night or early in the morning on regular bases. The `Scheduled Scan' configuration options are organized in 2 tabs; the Result Saving tab and the Results Notification tab. To access these tabs Right click on Configuration } Scheduled Scans and select Properties. This will bring up the Scheduled Scans configuration dialog.

Screenshot 47 - The Scheduled Scans configuration dialog

By default, all scheduled scan results are stored in the database backend. Use the Result Saving tab to configure the scheduled scans properties and store scheduled scan results to a specific XML file or HTML file (one file per scheduled scan).

GFI LANguard N.S.S. can also be configured to automatically send scheduled scan reports to a specific email address/recipient (for example, Administrator) at the end of a scheduled scan. Use the Results notifications tab to specify which reports to email and the destination email address. GFI LANguard N.S.S. can automatically email 2 types of report; the `Full Scan' report and the `Results Comparison' report.

Creating a scheduled scan

Screenshot 48 - List of configured Scheduled Scans

To create a scheduled scan:

1. Right click on the Configuration } Scheduled Scans sub-node and select New } Scheduled scan... This will bring up the `New Scheduled Scan' configuration dialog.

Screenshot 49 - New Scheduled Scan dialog

2. In the General tab which opens by default, specify the target computers (hostname, IP and IP range).

3 Select the scanning profile that will be used for this scheduled scan and specify a description of the scheduled scan.

4. If this scheduled scan is to be run periodically, specify the frequency at which the scan will be launched.

5. Specify the date and time at which the scheduled scan will start.

6. If alternative logon credentials are required, click on the Logon Credentials tab.

7. From the provided drop down list, select one of the following options:

`Alternative Credentials' - Select this option to authenticate to target computers a specific username and password string.
`SSH Private Key' - Select this option to authenticate to Linux based target computers using Private Key authentication. Specify the username and the `Private Key' file in the provided fields.

NOTE: Alternatively, you can configure scheduled scans to get the authentication details directly from Computer Profiles. To enable this feature select the `Use data from computer profiles' option. For more information on computer profiles, refer to the `Computer Profiles' section further on in this chapter.

8. Click on OK to save your settings.

Configuring the scan results saving options

Screenshot 50 - Scheduled Scans properties dialog

By default, scheduled scan results are stored in the Microsoft Access or Microsoft SQL Database backend. However, you can also output the scan results to an XML or HTML report file. These files can then be used further on for report comparison operations. To store the scan results in an XML/HTML file:

1. Right click on the Configuration } Scheduled Scans sub-node and select Properties. This will bring up the scheduled scans properties dialog.

2. To save the scan results to an XML file, select the `Save scheduled scan results to XML file' option and specify the name and path of the XML file.

3. To save scan results to an HTML file, select the `Generate and save scan result HTML reports to:' option and specify the name and path of the HTML file.

4. Click on OK to save the settings.

Configuring result notification options

Screenshot 51 - Scheduled Scan properties: Results Notification tab

GFI LANguard N.S.S. can be configured to send scheduled scan reports to a particular recipient via email. Reports that can be sent via email include the `Full Scan Results' report and the `Results comparison report'. The `Full Scan Results' report contains the results of the scheduled scan that has just been completed. The `Result Comparison' report includes the changes/differences identified between the results of the latest scan and the results of the preceding scan.

NOTE: The `Results Comparison' report will not be emailed to the administrator if no differences exist between the compared scan results or if you are running your very first scheduled scan.

To specify which reports will be sent via email after a scheduled scan:

1. Right click on the Configuration } Scheduled Scans sub-node and select Properties. This will bring up the scheduled scans properties dialog.

2. Click on the Results Notifications tab.

3. Select the report(s) that will be emailed upon completion of the scheduled scan.

4. Click on OK to save your settings.

NOTE: Use the Configuration } Alerting Options node to make changes in the mail server settings or administrator email address.